Extrapolate – AI Aging App

1
// Check requests for a pre-shared secret
2
const hasValidHeader = (request, env) => {
3
  return request.headers.get("X-CF-Secret") === env.AUTH_KEY_SECRET;
4
};
5

6
function authorizeRequest(request, env, key) {
7
  switch (request.method) {
8
    case "PUT":
9
    case "DELETE":
10
      return hasValidHeader(request, env);
11
    case "GET":
12
      return true;
13
    default:
14
      return false;
15
  }
16
}
17

18
export default {
19
  async fetch(request, env) {
20
    const url = new URL(request.url);
21
    const key = url.pathname.slice(1);
22

23
    if (!authorizeRequest(request, env, key)) {
24
      return new Response("Forbidden", { status: 403 });
25
    }
26

27
    switch (request.method) {
28
      case "PUT":
29
        await env.MY_BUCKET.put(key, request.body);
30
        return new Response(`Put ${key} successfully!`);
31
      case "GET":
32
        const object = await env.MY_BUCKET.get(key);
33

34
        if (object === null) {
35
          return new Response("Object Not Found", { status: 404 });
36
        }
37

38
        const headers = new Headers();
39
        object.writeHttpMetadata(headers);
40
        headers.set("etag", object.httpEtag);
41

42
        return new Response(object.body, {
43
          headers,
44
        });
45
      case "DELETE":
46
        await env.MY_BUCKET.delete(key);
47
        return new Response("Deleted!");
48

49
      default:
50
        return new Response("Method Not Allowed", {
51
          status: 405,
52
          headers: {
53
            Allow: "PUT, GET, DELETE",
54
          },
55
        });
56
    }
57
  },
58
};